Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133362e302f32342d3234203d3e20383334.roa
File: 34352e39312e3133362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: tv0+fFNKu2SmbYDgWV+gWWviy+YJcNxyLv8dyTZh59Q=
Subject key identifier: 15:16:A2:EC:BD:AD:98:BE:2B:C2:E7:CA:E6:47:CD:78:0E:FE:30:05
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 50F154B695F1BCB41048733B4D75326FDD73EAC8
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133362e302f32342d3234203d3e20383334.roa
Signing time: Wed 05 Apr 2023 14:30:08 +0000
ROA not before: Wed 05 Apr 2023 14:25:08 +0000
ROA not after: Wed 03 Apr 2024 14:30:08 +0000
asID: 834
IP address blocks: 45.91.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:f1:54:b6:95:f1:bc:b4:10:48:73:3b:4d:75:32:6f:dd:73:ea:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Apr 5 14:25:08 2023 GMT
Not After : Apr 3 14:30:08 2024 GMT
Subject: CN=1516A2ECBDAD98BE2BC2E7CAE647CD780EFE3005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:93:46:e2:dd:b5:83:1a:1e:7a:16:23:14:
2a:9b:01:4c:1e:b5:21:c6:2c:e2:45:20:3e:b9:93:
cf:c5:7b:ee:30:98:ff:b8:9a:e2:10:52:3f:f6:9e:
d7:5c:fd:25:e4:d2:b7:ad:37:36:7b:3a:b7:4c:c6:
b5:1c:e9:53:5f:7a:35:4f:c8:de:54:c1:d7:af:8b:
bb:4a:0b:9f:96:f1:47:58:54:08:40:65:e5:60:e7:
53:19:5c:25:6c:cf:a5:0d:94:2f:0d:52:e3:04:66:
48:aa:fa:27:82:a5:c2:cf:e2:ee:b3:f8:1e:71:de:
42:a9:bb:3c:2b:77:da:a2:cd:03:6e:a9:e7:58:1f:
ab:fb:fc:a1:05:ef:32:dc:c5:ba:c3:b8:ba:e2:38:
b4:d8:27:cb:41:1b:3e:7c:5c:4a:32:04:a1:e2:4a:
8f:0e:2f:69:aa:db:97:80:c0:f1:74:ae:12:ae:f6:
65:b1:9b:19:73:83:57:2b:b1:20:bb:2b:b3:d6:de:
f3:5d:d7:92:e3:a3:fb:03:68:e2:6f:92:a5:d4:5c:
41:22:86:ca:9c:25:76:dc:64:d4:74:90:28:52:5f:
8b:49:b1:18:94:85:48:c1:29:cf:32:30:26:0e:51:
45:f4:81:44:b5:0b:9b:62:d8:10:de:dc:01:f7:a7:
f9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:16:A2:EC:BD:AD:98:BE:2B:C2:E7:CA:E6:47:CD:78:0E:FE:30:05
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.136.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:d6:5c:74:1e:41:41:ea:3e:93:3a:91:7a:50:aa:0f:2e:4b:
c3:58:e5:81:1e:7d:7b:52:a3:e7:bd:c6:51:6f:38:ff:05:0d:
77:8d:2e:1d:9d:9a:b6:86:f7:5b:1a:59:9d:ef:2d:bc:3d:7f:
eb:7c:43:7c:72:44:2e:d9:f4:06:ca:a1:74:88:48:e1:35:ba:
96:8b:7c:59:d7:d3:a1:29:02:27:cc:c3:2a:93:1d:40:91:de:
54:05:ec:e6:40:c5:e8:ec:7a:c4:be:cd:b1:be:63:f4:a0:18:
54:85:eb:5b:d4:15:8e:54:1a:de:99:f5:15:6b:9e:b4:d9:ac:
73:c0:12:9c:dd:df:4b:0d:16:7d:8e:04:c0:5d:ec:53:b3:91:
0a:83:74:2e:f6:eb:3c:48:b3:4e:d6:92:74:08:ca:51:b9:83:
a8:ad:9c:14:0c:1a:ec:90:d9:57:e0:ed:d1:e7:2f:87:c9:c3:
2b:08:d7:fe:7b:9f:fd:07:ac:b3:16:1c:22:41:e4:b1:b9:23:
b9:76:e8:7d:5b:37:8a:f9:fd:c9:ab:f7:df:2c:98:2d:df:31:
31:44:7d:9c:64:56:01:87:52:1e:aa:02:fc:59:16:15:0b:15:
34:46:9e:00:87:08:af:a9:03:83:5b:90:ef:1f:a9:12:fa:28:
91:e1:ef:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:17 2024 by rpki-client on console-fra.rpki-client.org